The security of information in all its forms is of the utmost importance to Senior Management. We acknowledge that as an organisation, we can minimise information security risks through the preservation of confidentiality, integrity and availability of information. This gives confidence to interested parties that risks due to potential incidents are adequately managed. Our ultimate goal to continually improve Integrated Management System performance within the business.

In order to achieve this, the following information security objectives have been established:

• Strategic and operational information security risks is understood and treated to be acceptable to Polonious Pty Ltd
• The confidentiality of client information, product development and marketing plans is protected
• The integrity of company records is preserved
• Public web services and internal networks meet specified availability standards

To achieve these objectives, we shall act to:

• Communicate this policy to all existing employees and to new employees upon commencement
• Comply with all legislative and other requirements which are relevant to Polonious Pty Ltd
• Make our commitment information security and confidentiality visible to all interested parties
• Maintaining a Management System which meets the requirements of ISO 27001:2013.

This policy is the overarching statement of Polonious Pty Ltd’s commitment to information security which is supported by an Integrated Management System that encompasses additional policies that cover specific information security topics. This policy, together with the objectives and targets set, will be reviewed on an annual basis to ensure that it remains relevant and suitable to be operations of Polonious Pty Ltd.